Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252601 4.3 警告 Infoproject - Infoproject Biznis Heroj におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5040 2012-01-5 14:27 2011-12-30 Show GitHub Exploit DB Packet Storm
252602 7.5 危険 Infoproject - Infoproject Biznis Heroj における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5039 2012-01-5 14:26 2011-12-30 Show GitHub Exploit DB Packet Storm
252603 7.5 危険 hitCode - hitCode hitAppoint における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5038 2012-01-5 14:24 2011-12-30 Show GitHub Exploit DB Packet Storm
252604 4.4 警告 ConfigServer - ConfigServer Security & Firewall におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5033 2012-01-5 14:21 2011-12-10 Show GitHub Exploit DB Packet Storm
252605 4.9 警告 WinMount - WinMount の WMDrive.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-5032 2012-01-5 14:20 2011-12-29 Show GitHub Exploit DB Packet Storm
252606 7.5 危険 Shilpi Computers Limited. - cApexWEB の servlet/capexweb.parentvalidatepassword における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5031 2012-01-5 14:19 2011-12-29 Show GitHub Exploit DB Packet Storm
252607 3.5 注意 valthebald - Drupal 用 Meta tags quick モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5030 2012-01-5 14:18 2011-12-14 Show GitHub Exploit DB Packet Storm
252608 4.3 警告 Alexander Palmo - Simple PHP Blog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5029 2012-01-5 11:07 2011-12-29 Show GitHub Exploit DB Packet Storm
252609 4 警告 Novell - Novell Sentinel Log Manager におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-5028 2012-01-5 10:49 2011-12-29 Show GitHub Exploit DB Packet Storm
252610 4.3 警告 Zabbix - Zabbix におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5027 2012-01-5 10:49 2011-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
264831 9.8 CRITICAL
Network 		foscam c1_webcam_firmware Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credentials would allow remote access to any cameras found on the internet that do not hav… CWE-798
 Use of Hard-coded Credentials 		CVE-2016-8731 2024-11-21 11:59 2017-06-22 Show GitHub Exploit DB Packet Storm
264832 4.8 MEDIUM
Network 		apache ranger Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal us… CWE-79
Cross-site Scripting 		CVE-2016-8751 2024-11-21 11:59 2017-06-15 Show GitHub Exploit DB Packet Storm
264833 5.9 MEDIUM
Network 		apache ranger Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true. CWE-426
 Untrusted Search Path 		CVE-2016-8746 2024-11-21 11:59 2017-06-15 Show GitHub Exploit DB Packet Storm
264834 6.5 MEDIUM
Network 		cloudfoundry capi-release
cf-release 		An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privileged with the ability t… CWE-269
 Improper Privilege Management 		CVE-2016-8219 2024-11-21 11:59 2017-06-13 Show GitHub Exploit DB Packet Storm
264835 9.8 CRITICAL
Network 		cloudfoundry cf-release
routing-release 		An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can all… CWE-20
 Improper Input Validation  		CVE-2016-8218 2024-11-21 11:59 2017-06-13 Show GitHub Exploit DB Packet Storm
264836 7.5 HIGH
Network 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificat… CWE-295
Improper Certificate Validation  		CVE-2016-8231 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
264837 7.5 HIGH
Network 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers. CWE-200
Information Exposure 		CVE-2016-8230 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
264838 8.8 HIGH
Network 		lenovo lenovo_service_bridge A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed. CWE-352
 Origin Validation Error 		CVE-2016-8229 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
264839 7.8 HIGH
Local 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8228 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
264840 7.5 HIGH
Network 		apache qpid_broker-j The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication. Among the choices are the SCRAM-SHA-1 and SCRAM-SHA-256 Authenticat… CWE-200
Information Exposure 		CVE-2016-8741 2024-11-21 11:59 2017-05-15 Show GitHub Exploit DB Packet Storm